Nowadays Trusted Platform Module is present in most computers, and it ismaking its way into embedded platforms as well. In this talk I will explainhow to use the (firmware)TPM2.0 available on the Minnowboard MAX/Turbot (seealso https://fb.me/MinnowBoardMax and https://fb.me/MinnowBoardTurbot) foreveryday's encryption (https://fb.me/tpm2-openssl) Even though TPMs are cryptographic processors, it is surprisingly hard to usethem for common cryptographic operations like signatures and decryption. Moreover, as opposed to its predecessor TPM1.2, TPM2.0 gets a very littlesupport in Linux and the TGC Software Stack has no support for the most commonencoding formats (e.g. PEM and DER).